Exam Associate Cloud Engineer topic 1 question 269 discussion

Actual exam question from Google's Associate Cloud Engineer

Question #: 269
Topic #: 1

[All Associate Cloud Engineer Questions]

You are deploying an application on Google Cloud that requires a relational database for storage. To satisfy your company’s security policies, your application must connect to your database through an encrypted and authenticated connection that requires minimal management and integrates with Identity and Access Management (IAM). What should you do?

A. Deploy a Cloud SQL database with the SSL mode set to encrypted only, configure SSL/TLS client certificates, and configure a database user and password.
B. Deploy a Cloud SQL database with the SSL mode set to encrypted only, configure SSL/TLS client certificates, and configure IAM database authentication.
C. Deploy a Cloud SQL database and configure IAM database authentication. Access the database through the Cloud SQL Auth Proxy.
D. Deploy a Cloud SQL database and configure a database user and password. Access the database through the Cloud SQL Auth Proxy.

Show Suggested Answer

Suggested Answer: C 🗳️

by BuenaCloudDE at July 19, 2024, 9:47 a.m.

Comments

Submit Cancel

BuenaCloudDE

Highly Voted 1 year ago

Selected Answer: C

Cloud SQL Auth Proxy: This proxy ensures secure connections to your Cloud SQL database by automatically handling encryption (SSL/TLS) and IAM-based authentication. It simplifies the management of secure connections without needing to manage SSL/TLS certificates manually. IAM Database Authentication: This allows you to use IAM credentials to authenticate to the database, providing a unified and secure authentication mechanism that integrates seamlessly with Google Cloud IAM.

upvoted 7 times

BuenaCloudDE

1 year ago

A,B: You must managing SSL certification and database credentials. D: Relies on database-specific credentials rather than IAM, which doesn't fully leverage the benefits of IAM integration.

upvoted 1 times

...